Protected customer data requirements implementation in an app

[davut]

Hey all,

I was trying to publish my app but got rejected for protected customer data. I request name and email so I am in Level 2. I wonder how to implement those level 2 requirements such as staff access ( Limit staff access to protected customer data.). Any guides?
When I look for Staff GraphQL API it says

Requires read_users access scope. Also: The app must be a finance embedded app or installed on a Shopify Plus or Advanced store. Contact Shopify Support to enable this scope for your app.

That means I can’t know what is user’s role?

[Liam-Shopify]

Hi Davut,

Just to confirm, has your app been approved to access protected customer data? The docs on this are here: Work with protected customer data

[davut]

Hey Liam, thanks for the reply. No, that’s why I am here. I haven’t implemented almost any of the level 2 requirements.